Lucene search
DellCVE-2024-39584HistoryAug 28, 2024 - 6:15 a.m.
CVE-2024-39584
2024-08-2806:15:05
CWE-1392
dell
web.nvd.nist.gov
41
dell client platform
bios
cryptographic key
vulnerability
secure boot
arbitrary code execution
CVSS3
8.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
9.6%
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
Affected configurations
Node
delldell_client_platform_biosRange≤1.29.0
ORdelldell_client_platform_biosRange≤1.15.0
ORdelldell_client_platform_biosRange≤1.21.0
ORdelldell_client_platform_biosRange≤1.24.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | dell_client_platform_bios | * | cpe:2.3:a:dell:dell_client_platform_bios:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Dell Client Platform BIOS",
"vendor": "Dell",
"versions": [
{
"lessThan": "1.29.0",
"status": "affected",
"version": "N/A",
"versionType": "semver"
},
{
"lessThan": "1.15.0",
"status": "affected",
"version": "N/A",
"versionType": "semver"
},
{
"lessThan": "1.21.0",
"status": "affected",
"version": "N/A",
"versionType": "semver"
},
{
"lessThan": "1.24.0",
"status": "affected",
"version": "N/A",
"versionType": "semver"
}
]
}
]Related
nvd
nvd
CVE-2024-39584
2024-08-28 06:15:05
nessus
nessus
Dell Client BIOS Use of Default Cryptographic Key (DSA-2024-354)
2024-08-29 00:00:00
vulnrichment
vulnrichment
CVE-2024-39584
2024-08-28 05:46:40
cvelist
cvelist
CVE-2024-39584
2024-08-28 05:46:40
CVSS3
8.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
9.6%
Related for CVE-2024-39584